Which of the following violate Personal Data Protect Act regulations on collecting personal data? (1)Upon discovery of an infectious disease or what may be an infectious disease, a doctor reports the discovery to the local competent authorities without obtaining the patient's or patients' consent. (2)Department store membership application forms request customers to provide personal information and in accordance with the Personal Data Protect Act, clearly notify customers about the relevant provisions. (3)Schools, when requesting that overseas students studying in Taiwan provide their personal data on their student information card, do not need to notify the students on the relevant provisions in accordance with the Personal Data Protect Act. (4)Financial institutes are required to confirm the identity of the customers and retain proof of transactions for currency trading that exceeds a certain amount